WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
drag-and-drop-file-upload-for-elementor-forms
Published
2025-08-26
Title
Drag and Drop File Upload for Elementor Forms < 1.5.4 - Unauthenticated Arbitrary File Upload
Slug
drag-and-drop-file-upload-for-elementor-forms
Published
2026-09-09
Title
Drag and Drop File Upload for Elementor Forms < 1.6.1 - Unauthenticated Arbitrary File Upload via 'type' Parameter
Slug
drag-and-drop-file-upload-wc-pro
Published
2025-06-23
Title
Drag and Drop Multiple File Upload (Pro) - WooCommerce < 5.0.7 - Unauthenticated Arbitrary File Upload
Slug
drag-and-drop-file-uploads-wc-pro
Published
2025-07-01
Title
Drag and Drop Multiple File Upload (Pro) - WooCommerce < 5.0.7 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload
Slug
drag-and-drop-form-builder-for-contact-form-7
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
drag-and-drop-form-builder-for-contact-form-7
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2020-05-26
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.3.3 - Unauthenticated File Upload Bypass
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2020-09-21
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.5.5 - Unauthenticated Remote Code Execution
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2022-03-07
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2022-09-26
Title
Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2023-05-24
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.6.6 - File Upload and File deletion via CSRF
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2023-11-01
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.7.4 - Unauthenticated Arbitrary File Upload
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2024-04-29
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.7.8 - Sensitive Information Exposure
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-01-30
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.8.6 - Limited Arbitrary File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-03-27
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.8.8 - Unauthenticated Arbitrary File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-03-27
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.8.9 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-06-16
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.0 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-08-15
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.1 - Directory Traversal
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-01-06
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.9.3 - Unauthenticated Limited Arbitrary File Upload
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-01-14
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.3 - Missing Authorization to Unauthenticated File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-03-05
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.6 - Unauthenticated Arbitrary File Upload
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-04-17
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.7 - Unauthenticated Limited Arbitrary File Read via mfile Field
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-04-17
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.8 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-06-03
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.8 - Unauthenticated Stored Cross-Site Scripting
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-06-05
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings